CVE-2020-6865: ZTE Oscp

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20.

Affected products

• ZTE Oscp: version 16.19.10 only; version 16.19.20 only

Published 2020-04-30. Last modified 2026-06-17.